Moderate Kernel Security Update: Addressing Denial of Service in AlmaLinux Kernel Packages
Summary
ALSA-2026:1178: Moderate: kernel security update. Affects kernel versions < 6.12.0-124.29.1.el10_1. Fixed in 6.12.0-124.29.1.el10_1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The kernel is the core component of any Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. AlmaLinux, a community-driven enterprise Linux distribution, relies on the Linux kernel to provide stability, performance, and security. This vulnerability affects various kernel packages in AlmaLinux 10, which are essential for system operations and performance.
Vulnerability Detail
The vulnerability identified as CVE-2025-38383 is a Denial of Service (DoS) issue stemming from a data race condition in the vmalloc's show_numa_info function. This flaw can potentially allow an attacker to disrupt the normal operation of the system, leading to service unavailability. The vulnerability arises from improper handling of concurrent operations, which can be exploited to cause the kernel to crash or become unresponsive.
How To Fix
Minimum fixed version
6.12.0-124.29.1.el10_1
This is the first release that contains the fix.
sudo dnf update kernelTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can limit access to the affected functionality or implement resource limits to mitigate the impact of the vulnerability until the system is updated.
Conclusion
The vulnerability CVE-2025-38383 poses a moderate risk to AlmaLinux kernel packages, potentially leading to Denial of Service. Users are advised to update their kernel to the patched version to mitigate this risk effectively. Implementing workarounds can provide temporary relief until the update is applied.
See every vulnerability recorded for kernel →
FAQ
CVE-2025-38383 is a vulnerability in the Linux kernel that can lead to a Denial of Service due to a data race in the vmalloc's show_numa_info function.
Exploitation of this vulnerability can cause your system to crash or become unresponsive, leading to service interruptions.
If you cannot update immediately, consider implementing resource limits or restricting access to the affected functionality as a temporary workaround.
You can check if your application is affected by using the Vulert playground at Vulert Scanner, which allows you to monitor and alert for open-source vulnerabilities in real-time.
Vulert is a tool that monitors open-source vulnerabilities using a manifest file like package-lock.json, providing real-time alerts without requiring code access or installation.
Related vulnerabilities
Recent vulnerabilities recorded for kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
